Privacy Policy

This Privacy Policy applies to our website at www.prowegio-hausverwaltung.de, the connected online customer portal, mobile apps, contact and request forms and the processing of personal data as part of our property management activities.

If individual digital services display their own notices, those notices apply in addition.

When you visit the website for information purposes only, we process the data that your browser automatically transmits to our systems. This includes in particular IP address, date and time, requested URL, referrer, browser, operating system and language setting.

The processing is carried out to technically provide, stabilize and secure the website on the basis of Art. 6(1)(f) GDPR and Section 25(2) No. 2 TDDDG. Hosting and infrastructure services are provided in particular via Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxembourg.

Server log files are stored only for as long as required for operation, security and error analysis. The retention period depends on the respective technical and security-related purpose. Longer storage may only occur in individual cases to investigate security incidents or to establish, exercise or defend legal claims.

We use technically necessary cookies and similar storage technologies to provide the website securely and reliably. This includes in particular storing your cookie choice.

If you submit a ticket via the request form, we store the ticket number and submission timestamp locally in your browser for the convenience feature “Submitted tickets on this device”. This local history generally remains on the respective device for up to 30 days and can be removed by you at any time via the “Clear history” function or by deleting the local browser data.

The storage of this local ticket history is based on Section 25(2) TDDDG and Art. 6(1)(f) GDPR. Our legitimate interest is to provide you with a comprehensible overview of requests already submitted on the same device and to avoid unnecessary duplicate submissions.

Optional statistics and marketing functions only start if you allow them through the cookie banner. This includes Amazon CloudWatch RUM, Google Tag Manager, Google Analytics 4 and Google Ads conversion measurement. The legal basis is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. Technically necessary storage is based on Section 25(2) TDDDG and Art. 6(1)(f) GDPR.

You can withdraw your consent at any time with effect for the future via the cookie options provided or by deleting the local website data in your browser.

After your consent, we use Amazon CloudWatch Real User Monitoring (CloudWatch RUM) to measure the technical quality of the website. The provider is Amazon Web Services EMEA SARL.

In particular, page paths, page titles, host name, language, timestamps, technical errors, loading times, performance data and usage events defined by us are processed. The configuration is data-minimizing; complete query strings are not transferred to the statistics system.

The processing is based on your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG. AWS processes the data as a processor. The technical region is primarily eu-central-1 (Frankfurt); where third-country access cannot be excluded, the requirements of Art. 44 et seq. GDPR are observed.

Further information is available in the CloudWatch RUM privacy documentation and at https://aws.amazon.com/privacy/.

After your consent, we use Google Tag Manager to manage optional analytics and marketing tags, Google Analytics 4 for reach and usage analysis as well as Google Ads conversion tracking to measure whether users submit a management request after clicking an ad or interact with the request page. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The Google Tag Manager container is loaded on our website only after you allow optional services. Without consent, the consent status for advertising and analytics remains “denied” and the container is not started.

In particular, technical usage data, page paths, page titles, referrer, timestamps, consent status, device and browser information, interactions defined by us such as clicks on request, phone, email, WhatsApp, Google Maps and navigation links, request page views, form starts, form submissions as well as ad and conversion identifiers may be processed. Complete form contents, phone numbers entered by you or email addresses entered by you are not transmitted as Analytics events. The primary Google Ads conversion for a management request is triggered only after a request has been successfully submitted; supporting measurement events may already be recorded when users click through to the request page or view the request page.

Google tags are operated with consent mode. Unless you give consent, the consent status for advertising and analytics remains “denied”. After your consent, the corresponding Google consent signals are set to “granted”.

The processing is based on your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Where data is transferred to third countries, this is done in accordance with the statutory requirements of Art. 44 et seq. GDPR. Further information is available at https://policies.google.com/privacy, https://policies.google.com/technologies/partner-sites and https://business.safety.google/adsprocessorterms/.

We use Cloudflare Turnstile on the request form and the customer portal access request to protect the website against automated misuse and spam. The provider is Cloudflare Germany GmbH, c/o Design Offices München Atlas, Rosenheimer Straße 143C, 81671 Munich, Germany, and Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA.

Turnstile uses technical signals to assess whether a request is likely to come from a human. In particular, IP address, browser and device information, timestamps, interaction data and technical verification tokens may be processed.

The use is based on Art. 6(1)(f) GDPR and Section 25(2) TDDDG. Our legitimate interest is protecting our forms and systems. Further information is available in Cloudflare's Privacy Policy, including the Turnstile Privacy Addendum.

If you contact us by form, email, phone, chat or digital assistance functions, we process the information you provide. This includes in particular name, contact details, property reference, message content, technical metadata and, where applicable, attachments or photos.

AI-supported assistance may be used in the request form, customer portal, chat and telephone AI support to help fill in, review, structure and phrase information. If you use such a function, the interaction with an AI system is identified at the relevant point. Responses and suggestions may be generated automatically; the AI does not automatically submit the form or make binding property-management decisions without human review. For chat, phone and assistance functions, specialized communication, cloud or AI service providers may be used as processors.

The legal bases are, depending on the matter, Art. 6(1)(b), Art. 6(1)(c) or Art. 6(1)(f) GDPR. If you voluntarily provide special categories of personal data under Art. 9 GDPR, we process them only insofar as required to handle your matter or if you have expressly consented.

We provide an online customer portal and mobile apps for owners, tenants and other authorized users. In this context, we process master data, login data, property and unit assignments, usage data, communication data, tickets, documents, damage reports and technical app and device data.

Depending on your use of mobile apps, push tokens, app version, operating system, camera, photo or file access may also be processed. Optional permissions are used only if you enable them on your device.

Processing is carried out to fulfil contractual obligations, provide digital services and manage properties efficiently on the basis of Art. 6(1)(b), (c) and (f) GDPR; optional permissions are based on your consent.

As part of our activities as residential property manager, we process personal data of owners, tenants, advisory board members, interested parties, service providers, tradespeople and other participants.

The processed data includes in particular master data, contact data, contract data, property and unit data, billing and payment data, bank details, communication data, resolutions, minutes, tickets, damage and insurance data and documents required for proper management.

Recipients may, depending on the process, include tradespeople, technical service providers, insurers, banks, metering service providers, energy suppliers, lawyers, tax advisors, experts, courts and authorities.

The legal bases are in particular Art. 6(1)(b), Art. 6(1)(c) and Art. 6(1)(f) GDPR.

We use service providers for hosting, IT operations, customer portal, ticket and communication systems, statistics, security and digital assistance functions. Where these providers process personal data on our behalf, we conclude processing agreements under Art. 28 GDPR.

Transfers to countries outside the European Union or the European Economic Area only take place if there is an appropriate legal basis, such as an adequacy decision by the EU Commission, EU Standard Contractual Clauses or explicit consent.

You have the right to lodge a complaint with a data protection supervisory authority. In particular, the authority of your place of residence, workplace or the place of the alleged infringement is competent.

The authority regularly competent for us is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2-4, 40213 Düsseldorf, Germany, phone: +49 211 38424-0, email: poststelle@ldi.nrw.de, website: https://www.ldi.nrw.de/.

This Privacy Policy is dated August 2026.

Further development of our website, customer portal or app, or changes in law, may require updates. The current version is available at https://www.prowegio-hausverwaltung.de/datenschutz.en.html.